1 matches found
AgentCore CLI Bedrock Agent Import Vulnerable to Code Injection via Improper Triple-Quote Escaping
Summary The AgentCore CLI @aws/agentcore is a developer tool for managing agent infrastructure lifecycle on Amazon Bedrock AgentCore. An issue exists where, under certain circumstances, a crafted collaborationInstruction value stored in Bedrock Agent collaborator metadata can break out of a Pytho...
9CVSS6.3AI score0.0034EPSS
SaveExploits0References9Affected Software1
20